Answer:
To prevent leakage of user's passwords.
Explanation:
I don't really know the premise of your question, but I assume it is this. If the hacker has access to the user's data, they may have the email address. If they cannot crack the password hash, then they may not attempt to login to the user's accounts on other websites.